• XSS.stack #1 – первый литературный журнал от юзеров форума

How do people get phpMyAdmin logins so much?

PMA is not a database by itself, it's a GUI to view/manage MySQL databases.
So each time you have a successful RCE on a site, you can either use the existing
one with the credentials from the DB config file or upload your own PMA to operate with the DB.

Useful when the DB is very large to download and you only need specific data.
 
PMA is not a database by itself, it's a GUI to view/manage MySQL databases.
So each time you have a successful RCE on a site, you can either use the existing
one with the credentials from the DB config file or upload your own PMA to operate with the DB.

Useful when the DB is very large to download and you only need specific data.
Interesting, is this the only way to get access to MySQL Databases? Or is there more ways?
Like SQL Injection and Brute-forcing panels is an option too, right? Or do I sound stupid?

Also, I want to know everything. Is there any good tutorials on how to find RCE/SQLI on a site? (I already know how to brute-force)

I just want to know how to do these things as I'm only familiar with Scraping websites and a bit of Wordpress. Thanks.
 
Yes, except RCE also SQL injection, brute force, or hitting the admin with a hammer are valid
options.

 


Напишите ответ...
  • Вставить:
Прикрепить файлы
Верх